CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,344 vulnerabilities with CWE-352
CVE-2024-6719 HIGH
Offload Videos < 1.0.1 - Cross-Site Request Forgery in Settings Update
CVSS 8.1
CVE-2024-12750 MEDIUM
Competition Form < 2.0 - Cross-Site Request Forgery in Settings Update
CVSS 4.3
CVE-2024-12301 MEDIUM
JSP Store Locator < 1.0 - Cross-Site Request Forgery
CVSS 6.5
CVE-2024-12282 MEDIUM
wp-connect < 2.5.6 - Cross-Site Request Forgery and Stored Cross-Site Scripting
CVSS 6.1
CVE-2024-11719 MEDIUM
tarteaucitron-wp < 0.3.0 - Cross-Site Request Forgery and Stored Cross-Site Scripting
CVSS 6.1
CVE-2024-11373 MEDIUM
Connexion Logs < 3.0.2 - Cross-Site Request Forgery in Settings Update
CVSS 4.3
CVE-2024-10677 MEDIUM
Bluetrait Blue Trait Event Viewer < 2.0.2 - CSRF
CVSS 4.3
CVE-2024-10634 MEDIUM
Nokaut Offers Box < 1.4.0 - Cross-Site Request Forgery in Settings Update
CVSS 4.3
CVE-2024-11142 HIGH
Proticaret < 6.0 - Cross-Site Request Forgery
CVSS 8.8
CVE-2024-13338 MEDIUM
Clearfy Cache < 2.3.1 - Cross-Site Request Forgery via wclearfy_cache_delete Functionality
CVSS 5.3
CVE-2024-13337 MEDIUM
Clearfy Cache - WordPress optimization plugin <2.3.2 - CSRF
CVSS 4.3
CVE-2024-8243 MEDIUM
WordPress/Plugin Upgrade Time Out Plugin <1.0 - CSRF
CVSS 6.3
CVE-2024-6860 MEDIUM
WP MultiTasking < 0.1.12 - Cross-Site Request Forgery in Permalink Suffix Settings
CVSS 4.3
CVE-2024-6857 MEDIUM
WP MultiTasking < 0.1.12 - Cross-Site Request Forgery in Script Settings Update
CVSS 4.3
CVE-2024-41795 MEDIUM
SENTRON 7KT PAC1260 Data Manager - Cross-Site Request Forgery
CVSS 6.5
CVE-2024-11071 HIGH
Cyberdigm DestinyECM - Cross-Site Request Forgery via JSON Hijacking
CVSS 8.8
CVE-2024-56474 MEDIUM
IBM TXSeries for Multiplatforms <9.1, 11.1 - CSRF
CVSS 4.3
CVE-2024-13146 HIGH
Booknetic < 4.1.5 - Cross-Site Request Forgery via Staff Account Creation
CVSS 8.8
CVE-2024-13710 MEDIUM
Estatebud - Properties & Listings <5.5.0 - CSRF
CVSS 4.3
CVE-2024-13118 MEDIUM
IP Based Login < 2.4.1 - Cross-Site Request Forgery via Log Deletion
CVSS 4.3
CVE-2024-13768 MEDIUM
WordPress Use Custom Fonts <4.2 - CSRF
CVSS 4.3
CVE-2024-9847 HIGH
flatpress < 1.4 - Cross-Site Request Forgery via Plugin Toggle Action
CVSS 8.0
CVE-2024-9365 MEDIUM
polyaxon/polyaxon v2.4.0 - Cross-Site Request Forgery
CVSS 6.5
CVE-2024-9311 MEDIUM
haotian-liu/llava v1.2.0 - Unauthenticated Cross-Site Request Forgery and Arbitrary File Upload
CVSS 6.1
CVE-2024-8736 MEDIUM
lollms_web_ui V12 - Denial of Service via CSRF Boundary Parsing in File Upload Endpoints
CVSS 6.5
Details
Vulnerabilities 9,344
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits